Categories: Ransom

Should I remove “Generic.Ransom.CloudSword.9B0818CA”?

The Generic.Ransom.CloudSword.9B0818CA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.CloudSword.9B0818CA virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

How to determine Generic.Ransom.CloudSword.9B0818CA?


File Info:
crc32: 21E7C190md5: 765a95dde0d971fb45e31482c140d9ecname: 765A95DDE0D971FB45E31482C140D9EC.mlwsha1: 6544fc385228e32674aa83aa7ebb710bd10aee62sha256: f4d49477da58d63b23cbcbfcd844513de19e745f97fb88de4c2acb33d4f5d718sha512: 13c55f84e7420e4af0c8bc3c7c1a5d912d9ec571566b350269f2f7294ba3d36547aa4d9f7a724c8ac888124c7e2c710a2bf39ebea08c4b248a9e2831fce06b19ssdeep: 6144:A8LxB60+uhQMg86tI9R0ZqLmOwZW7huq06KthU9d/Qf3cK+QM:t+uhQMgfCnf5yfJ6KtaPu3cKatype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: ntckynsmnyahmttiyjFileVersion: 12.8.4.4.CompanyName: rpduaLegalTrademarks: dcxqhrizwhjoqjComments: ejwhvehalvreProductName: dewuhkgrdrdlFileDescription: zefjhdabTranslation: 0x0000 0x04e4

Generic.Ransom.CloudSword.9B0818CA also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	DeepScan:Generic.Ransom.CloudSword.9B0818CA
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.de0d97
Symantec	Trojan.Gen.2
APEX	Malicious
BitDefender	DeepScan:Generic.Ransom.CloudSword.9B0818CA
MicroWorld-eScan	DeepScan:Generic.Ransom.CloudSword.9B0818CA
Ad-Aware	DeepScan:Generic.Ransom.CloudSword.9B0818CA
Sophos	Mal/Generic-S
FireEye	DeepScan:Generic.Ransom.CloudSword.9B0818CA
Emsisoft	DeepScan:Generic.Ransom.CloudSword.9B0818CA (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=86)
Malwarebytes	Malware.AI.2397364869
AVG	FileRepMalware